Chevalley Groups of Type G2 as Automorphism Groups of Loops 

Petr VojtechovskyDepartment of Mathematics, Iowa State University, Ames, Iowa, 
<N ■ 50011, U.S.A. 

Abstract 

CN . Let M*(q) be the unique nonassociative finite simple Moufang loop constructed over 

GF(q). We prove that Aut(M*(2)) is the Chevalley group G 2 (2), by extending 
multiplicative automorphism of M*(2) into linear automorphisms of the unique 
split octonion algebra over GF{2). Many of our auxiliary results apply in the 
general case. In the course of the proof we show that every element of a split 
octonion algebra can be written as a sum of two elements of norm one. 
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1 Composition Algebras and Paige Loops 



j> ■ Let C be a finite-dimensional vector space over a field k, equipped with a quadratic 

ON . form N : C — ► k and a multiplicative operation •. Following [7], we say that 

C = (C, N, +, •) is a composition algebra if (C, +, •) is a nonassociative ring with 
identity element e, TV" is nondegenerate, and N(u ■ v) = N(u)N(v) is satisfied for 
every u, v £ C. The bilinear form associated with TV will also be denoted by N. 
Recall /that N : C x C — > k is defined by N(u, v) = N(u + v) - N(u) - N(v). 
Write u _L v if N(u, v) = 0, and set u 1 - = {v £ C; u _L v }. 

The standard 8-dimensional real Cayley algebra O constructed by the Cayley- 
Dickson process (or doubling [7]) is the best known nonassociative composition 
algebra. There is a remarkably compact way of constructing O that avoids the 
iterative Cayley-Dickson process. As in [2], let B = {e = eo, ei, ■ ■ ., ej} be a basis 
^ , whose vectors are multiplied according to 

H ; 

. . 1 c r — 1, 6r+7 — &ri G r e s — e s e r , e r _|_ie r +3 — e r j r 2e r j r § — e r +4e r +5 — e r , (1) 

for r, s S {1, . . . , 7}, r ^ s. (Alternatively, see [1, p. 122].) The norm N(u) of a 
vector u = X^J=o a « e * e ® is given by X^=o a? • 

Importantly, all the structural constants 7^, defined by • ej = Ylk=o"fijk e k, 
are equal to ±1, and therefore the construction can be imitated over any field k. 
For k = GF(q) of odd characteristic, let us denote the ensuing algebra by 0(q). 
When q is even, the above construction does not yield a composition algebra. 

The following facts about composition algebras can be found in [7]. Every non- 
trivial composition algebra C has dimension 2, 4 or 8, and we speak of a complex, 
quaternion or octonion algebra, respectively. We say that C is a division algebra 
if it has no zero divisors, else C is called split. There can be many non-isomorphic 
octonion algebras over a given field. Exactly one of them is guaranteed to be split. 
Moreover, when k is finite, all octonion algebras over k are isomorphic (and thus 
split). Let 0(q) be the unique octonion algebra constructed over GF(q). 
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All composition algebras satisfy the so-called Moufang identities 

{xy){zx) = x((yz)x), x{y(xz)) = {{xy)x)z, x{y(zy)) = ((xy)z)y. (2) 

These identities are the essence of Moufang loops, undoubtedly the most inves- 
tigated variety of nonassociative loops. More precisely, a quasigroup (L, •) is a 
Moufang loop if it possesses a neutral element e and satisfies one (and hence all) 
of the Moufang identities ([2]) . We refer the reader to [6] for the basic properties of 
loops and Moufang loops in particular. Briefly, every element x of a Moufang loop 
L has a both-sided inverse x _1 , and a subloop (x, y, z) of L generated by x, y and 
z is a group if and only if x, y and z associate. Specifically, every two-generated 
subloop of L is a group. 

Paige [5] constructed one nonassociative finite simple Moufang loop for every 
finite field GF(q). Liebeck [3] used the classification of finite simple groups in 
order to prove that there are no other nonassociative finite simple Moufang loops. 
Reflecting the current trend in loop theory, we will call these loops Paige loops, 
and we denote the unique Paige loop constructed over GF(q) by M*(q). 

The relation between O(g) and M*{q) is as follows. Let M(q) be the set of all 
elements of 0(q) of norm one. Then M{q) is a Moufang loop with center Z(M{q)) = 
{e, -e}, and M(q)/Z(M(q)) is isomorphic to M*{q). Note that M(q) = M*(q) in 
characteristic 2. 

Historically, all split octonion algebras and Paige loops were constructed by Zorn 
[9] and Paige without reference to doubling. Given a field k, consider the vector 
matrix algebra consisting of all vector matrices 



where a, b G k, a, j3 6 A; 3 , addition is defined entry-wise, and multiplication by 



Here, a ■ [5 (resp. a x (3) is the standard dot product (resp. vector product) of a 
and (5. Use det x = oh — a ■ (5 as a norm to obtain an octonion algebra. In fact, 
this is exactly the unique split octonion algebra over k. The identity element is 



The purpose of this paper is to initiate the investigation of automorphism groups 
of Paige loops. We will extend automorphisms of M*(2) into automorphisms of 
0(2) to prove that Aut(M*(2)) is the exceptional Chevalley group G 2 (2). We 






and, when N(x) = det x ^ 0, we have 
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also present several results for the general case. Since G^G?) < Aut(M(g)), it is 
reasonable to expect that equality holds whenever q is prime. See Acknowledgement 
for more details. It is fun to watch how much information about the (boring) 
additive structure of a composition algebra can be obtained from the multiplication 
alone (cf. Lemma I2.4D . 

2 Multiplication versus Addition 

Perhaps the single most important feature of composition algebras is the existence 
of the minimal equation (cf. [7, Prop 1.2.3]). Namely, every element x £ C satisfies 

x 2 - N(x, e)x + N(x)e = 0. (3) 

Furthermore, (J3j) is the minimal equation for x when x is not a scalar multiple of 
e. 

Lemma 2.1 Let C be a composition algebra, x, y E C . Then 

N(xy,y)=N(x,e)N(y). (4) 

When N(y) ^ 0, we have 

(xy' 1 ) 2 - N(x, y)N(y)- 1 xy- 1 + N(xy~ 1 )e = 0. (5) 

In particular, 

(xy' 1 ) 2 - N(x, y)xy~ 1 + e = (6) 
whenever N(x) = N(y) = 1. In such a case, (xy' 1 ) 2 = —e if and only if x _L y. 

Proof We have N(xy, y) = N(xy + y) — N(x)N(y) — N(y), and N(xy + y) = 
N(x + e)N(y) = (N(x, e) + N(x) + N(e))N(y) = N(x, e)N(y) + N(x)N(y) + N(y). 
Equation (j3|) follows. 

Substitute xy' 1 for x into ([!]) to obtain N(x, y) = N(xy _1 , e)N(y). The mini- 
mal equation 

(xy' 1 ) 2 - N(xy~ 1 , e)xy' 1 + N(xy~ 1 )e = 
for xy' 1 can then be written as ©, provided N(y) 0. The rest is easy. □ 

We leave the proof of the following Lemma to the reader. 

Lemma 2.2 Let 




be an element of a composition algebra C satisfying N(x) = 1. Then 

(i) x 2 = e if and only if (a, (3) = (0, 0) and a = b G {1, —1}, 

(ii) x 2 = —e if and only if ((a, f3) = (0, 0), b = a' 1 , and a 2 = —1) or ((a, (3) ^ 
(0, 0) and b = —a), 
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(iii) x 3 = e if and only if ((a, (3) = (0, 0), b = a , and a 3 = 1) or ((a, (3) ^ (0, 0) 
and b = —1 — a), 

(iv) x 3 = — e if and only if ((a, (5) = (0, 0), b = a~ x , and a 3 = —1) or ((a, (3) ^ 
(0, 0) and 6= 1-a). 

Let us denote the multiplicative order of x by |x|. 

Lemma 2.3 Lei C be a composition algebra. Assume that x, y £ C satisfy N(x) = 
N(y) = 1, x ^ y. The following conditions are equivalent: 

(i) (xy- 1 ! = 3, 

(ii) (xy -1 ) 2 + xy _1 + e = 0, 

(iii) 2V(z, y) = -1, 

(iv) iV(x + y) = i. 

Proof The equivalence of (ii) and (iii) follows from the uniqueness of the minimal 
equation ([3]). Condition (iii) is equivalent to (iv) since N(x) = N(y) = 1. It suffices 
to prove the equivalence of (i) and (ii). 

As (a 3 — e) = (a — e)(a 2 + a + e), there is nothing to prove when C has no zero 
divisors. The implication (ii) => (i) is obviously true in any (composition) algebra. 
Let us prove (i) =>■ (ii) for a split octonion algebra C. Assume that |xy _1 | = 3, 
i/y, and 

a a \ _ ( c 7 
b ) ' V= \6 d 

We prove that N(x + y) = 1. Direct computation yields A^(x + y) = 2 + r + s, 
where r = ad — a ■ 5, s = be — (3 • 7. Also, 

-1 /re 

for some e, (p G k 3 . Since (xy -1 ) 3 = e, we have either ((e, ip) = (0, 0), s = r _1 , 
and r 3 = 1), or ((e, ip) ^ (0, 0), and s = — 1 — r), by Lemma 12.21 If the latter 
is true, we immediately get N(x + y) = 1. Assume the former is true. Then 
r + s = r + r _1 . Also, r 3 = 1 implies r = 1 or r 2 + r + 1 = 0. But r = 1 leads to 
x = y, a contradiction. Therefore r 2 + r + 1 = 0, i.e., r + r _1 = — 1, and we get 
N(x + y) = 1 again. □ 

There is a strong relation between the additive and multiplicative structures in 
composition algebras. 

Lemma 2.4 Let C , x, and y be as in Lemma \2.3[ Then N(x + y) = 1 if and only 
if x + y = —xy x. 

Proof The indirect implication is trivial. Assume that A^(x + y) = 1. Then 
(xy -1 ) 2 + xy^ 1 + e = 0, and (xy -1 ) 3 = e. Thus yx~ x = (xy -1 ) 2 = — xy -1 — e. 
Multiplying this equality on the right by x yields y = — xy _1 x — x. □ 
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3 Doubling Triples 

Any composition algebra C can be constructed from the underlying field k in three 
steps. Proposition 1.5.1 and Lemma 1.6.1 of [7] tell us how to do it. Imitating 
these results, we say that a triple (a, b, c) € C 3 is a doubling triple if N(a) ^ 0, 
N(b) / 0, N(c) /0,ke 1 na 1 1 cee i na 1 nf) i n (aft)" 1 , a e e 1 - (resp. a £ e- 1 ) 
and the characteristic of fc is odd (resp. even). Then B = {e, a, 6, aft, c, ac, 6c, 
(afr)c} is a basis for C. 

Construction (pQ) immediately shows that there is a doubling triple with N{a) = 
iV(6) = iV(c) = 1 when k is of odd characteristic. Such a doubling triple exists for 
every split octonion algebra in even characteristic, too. 

Lemma 3.1 Let k be a field of even characteristic. Then 

(( (1,0,0) \ / (0,1,0) \ / (0,0,1) \\ 

VV (i.o.o) i / ' V (0' 1 ' ) / ' V to* * 1 ) J J 

is a doubling triple consisting of elements of norm one. 

Proof Straightforward computation. □ 

Doubling triples can be used to induce automorphisms. By an automorphism of a 
composition algebra C we mean a linear automorphism, i.e., a bijection / : C — > C 
satisfying f(u + v) = f(u) + /(«), /(An) = Xf{u), and f{u ■ v) = f(u) ■ f{v) for 
every u, v G C, A E k. By [7, Thm 1.7.1 and Cor 1.7.2], every such automorphism 
is an isometry (i.e., N(f(u)) = N(u)), and vice versa. Springer and Veldkamp [7, 
Ch. 2] use algebraic groups to show that Aut(Q(c/)) is the exceptional group G2(q), 
and more. 

Proposition 3.2 Let (a, b, c), (a', 6', c') be two doubling triples of a composition 
algebra C. Then there is an automorphism of C mapping (a, b, c) onto (a', 6', c') 
if and only if N(x) = N(x'), for x = a, b, c. 

Proof Let k be the underlying field. The necessity is obvious since every auto- 
morphism is an isometry. Now for the sufficiency. Let A = ke © ka, B = A® Ab, 
C = Be Be, and similarly for A', B', C = C. Define tpx ■ X — ► X' = ij} X {X) 
(for X = A, B, C) by 

ip A {x + ya) = x + ya' {x, y G k), 

ipB{x + yb) = iPa(x) + ipA(y)b' (x,yeA), 

ipc{x + yc) = tpB(x) + ip B (y)c' (x,y£B). 

All maps ipx are clearly linear, and it is not hard to see that they are also multi- 
plicative. (One has to use the assumption N(x) = N(x').) Since a', b', d generate 
C = C, ipe is the automorphism we are looking for. □ 
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4 Restrictions and Extensions of Automorphisms 

The restriction of h G Aut(0(g)) onto the loop M{q) is a (multiplicative) auto- 
morphism. Moreover, two distinct automorphisms of 0(q) differ on M(q), because 
there is a basis for C consisting of unit vectors (cf. construction (pQ) and Lemma 

EH). 

We would like to emphasize at this point how far are the metric properties of N 
from our intuitive understanding of (real) norms. Theorem 14.11 is not required for 
the rest of the paper, but is certainly of interest in its own right. 

Theorem 4.1 Every element of a split octonion algebra C is a sum of two elements 
of norm one. 

Proof We identify C with the vector matrix algebra over k, where the norm is 
given by the determinant. Let 




be an element of C. First assume that (3 ^ 0. Note that for every A £ k there is 
7 € k 3 such that 7 • [3 = A. Pick 7 € /c 3 so that 7 ■ /3 = a + 6 — ab + a ■ (3. Then 
choose (5 £ 7 1 n a 1 / t). (As usual, a _L 5 if and only if a ■ 5 = 0.) This choice 
guarantees that (a — 1)(6 — 1) — (a — 7) • (/? — 6) = ab — a — b+ 1 — a ■ /3 + 7 ■ (3 = 1. 
Thus 

fa a A _ / 1 7 \ / a — 1 a-7 \ 
\(3 b ) = \8 1 ) + { P-6 6-1 J 

is the desired decomposition of x into a sum of two elements of norm 1. Note that 
the above procedure works even for a = 0. 

Now assume that (3 = 0. If a 7^ 0, we use a symmetrical argument as before to 
decompose x. It remains to discuss the case when a = (3 = 0. Then the equality 

( a A = / a (1,0,0) A / (-1,0,0) A 

V 6 J \ (-1,0,0) ) + V (i»o,o) & / 

does the job. □ 

We now know that (?2(<z) is a subgroup of Aut(M(q)). Let us consider the exten- 
sion problem. Pick an automorphism g of the (not necessarily simple) Moufang loop 
M(q). The ultimate goal is to construct h S Aut(0(g)) such that h \ M(q) = g. 
If this can be done, we immediately conclude that Aut(M(q)) = G*2(g) for every q. 
We like to think of the problem as a notion "orthogonal" to Witt's lemma. Roughly 
speaking, Witt's lemma deals with extensions of partial isometries from subspaces 
onto finite-dimensional vector spaces, whereas we are attempting to extend a multi- 
plicative, norm-preserving map from the first shell M(q) into an automorphism (= 
isometry) of 0(q) . Naturally, g is not linear because M(q) is not even closed under 
addition. However, the analogy with Witt's lemma will become more apparent 
once we prove that g is, in a sense, additive (cf. Proposition 17. ip . 
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Lemma 4.2 Let g G Aut(M(g)), and let (a, b, c) be a doubling triple for 0(q) 
with N(a) = N(b) = N(c) = 1. Then (g(a), g(b), g(c)) is a doubling triple (with 
N(g(a))=N(g(b))=N(g(c)) = l). 

Proof Since (a, b, c) is a doubling triple, we have 6 £ e 1 (1 a 1 , c € e 1 n a 1 n 6 1 . 
Moreover, a G e 1 - (resp. a G" e -1 ) if q is odd (resp. even). By Lemmas 12.11 and 12.31 
this is equivalent to b 2 = c 2 = (ab~ 1 ) 2 = (acT 1 ) 2 = (6c -1 ) 2 = ((afr)c -1 ) 2 = -e, 
and a 2 = —e (resp. \a\ = 3). Because g G Aut(M(g)), we have g(b) 2 = g(c) 2 = 
(g{a)g{b)- 1 ) 2 = (g{a)g{c)- 1 ) 2 = {g{b)g{c)- 1 ) 2 = {(g{a)g{b))g{c)- 1 ) 2 = -e and 
g(a) 2 = — e (resp. \g(a)\ = 3). Another application of Lemmas 12.11 and 12.31 shows 
that (g(a), g(b), g(c)) is a doubling triple. □ 

In particular, the mapping h = ^o(g) constructed from g and (a, b, c) by Propo- 
sition [3?2] is an automorphism of 0(q) satisfying ip{x) = g(x), for x = a, b, c. 

Remark 4.3 This extension h can be obtained in another way when the charac- 
teristic is odd. Namely, construct 0(q) as in section[0 and define h : 0(q) — ► 0(q) 
by 

7 7 

h(} j diet) = ^Jaiflf(ei). 

i=0 i=0 

Obviously, h is linear. For fixed i, j, only one of the 8 structural constants jijk is 
nonzero, and it is equal to ±1. Using linearity of h, it is therefore easy to check 
that h is multiplicative. 

By the construction, h coincides with g on a basis B. However, we do not know 
whether h is an extension of g. The fact that h \ B = g \ B does not guarantee 
that h \ M(q) = g, since B does not need to generate M{q) by multiplication. 
Interestingly enough, it seems to never be the case! The key to answering these 
questions is to look at the additive properties of g. 

5 Automorphisms of Finite Octonion Algebras 

We have entered a more technical part of the paper. In this section, we construct 
a family of automorphisms of 0(q). 

Let k = GF(q), and let Lie(g) be the three-dimensional Lie algebra k 3 with 
vector product x playing the role of a Lie bracket. A linear transformation / : 
Lie(q) — > Lie(g) belongs to Aut(Lie(g)) if and only if f(a X 0) = /(a) x /(/?) is 
satisfied for every a, j3 G k 3 . We say that a linear transformation / is orthogonal 
if /(a) • /(/?) = a ■ P for every a, /? G A; 3 . 

Lemma 5.1 For a non-singular orthogonal linear transformation f : k 3 — ► /c 3 ; 
lei / : 0(q) — ► 0(q) be the mapping 

?( a a \ = ( a \ 
J \f3b) V f(P) b J • 

Then f G Aut(0(g)) i/ and only if f G Aut(Lie(g)). 
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Proof The map / is clearly linear and preserves the norm. Since / is one-to-one, 
so is /. We have 

f ( a a \?( c 7 
J V P b J J \5 d 

ac + f(a) ■ f(5) 0/(7) + df(a) - /(/?) x f(5) 

cf(j3) + bf(5) + f(a) x /( 7 ) f(j3) ■ /( 7 ) + 6d 



On the other hand, 

7 



a a \ / c 7 \ \ _ / ac + a- J /( a 7 + da — /? x 5) 

/? & ;V 5 d / / V /(c/ 3 + W + a x 7) /? • 7 + M 

Sufficiency is now obvious, and necessity follows by specializing the elements a, 6, 
c, d, a, /?, 7, 5. □ 

For a map /, let — / be the map opposite to /, i.e., (—f)(u) = — (/(u)). Also, 
for a permutation 7r G S3, consider tt as a linear transformation on A; 3 defined by 

7r(ai, 2 , 03) = ("77(1), "77(2), «tt(3))- 

Apparently, — S3 = {— tt; tt G S3} is a set of non-singular orthogonal linear trans- 
formations. 

Lemma 5.2 — tt G Aut(0(g)) for every tt G S3. 

Proof Let tt G S3 be the transposition interchanging 1 and 2, and let a, /? G A; 3 . 
Then 

vr(a x /J) = (03/?! - ax/33, a 2 (3 3 - a 3 (3 2 , a\(h ~ 012 Pi), 

and 

7r(a) x 7r(/3) = (ai/3 3 - a 3 /3i, a 3 /3 2 - a 2 P 3 , a 2 A - aiAz)- 

Hence — 7r(a X (3) = it (a) x 7r(/3) = (— vr)(a) x (— 7r)(/3). Thanks to the symmetry of 
S3, we have shown that — tt G Aut(Lie((/)) for every 7r G S3. The rest follows from 
Lemma 15.11 □ 

Observe there is another automorphism when q is even: 

Lemma 5.3 Define d : Q(q) — ► Q(q) by 

d ( I a b) = ( b ^ 
\ p b J \ a a 

Then d G Aut(0(g)) if and only if q = 2 n . 

Finally, we look at conjugations. Let L be a Moufang loop. For x G L, define the 
conjugation T x : L — ► L by T x (y) = x~ l yx, where x~ l yx is unambiguous thanks 
to the properties of L. Not every conjugation of L is an automorphism. By [6, 
Thm IV. 1.6], T x G Aut(L) if x 3 = e. (And it is not difficult to show that x 3 = e is 
also a necessary condition, provided L is simple.) 
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6 Transitivity of the Natural Action 

We take advantage of the automorphisms defined in section \5\ and investigate the 
natural action of Aut(M*(2)) on M*(2) = M(2). The lattice of subloops of M*(2) 
was fully described in [8]. Here, we only focus on the action of Aut(M*(2)) on 
involutions and on subgroups of M*(2) isomorphic to V4. 
Once again, identify 0(2) with the vector matrix algebra. 

By Lemma 12.21 M*(2) contains only elements of order 1, 2 and 3. Furthermore, 
every involution x € M*(2) is of the form 




for some a £ {0, 1} and a, (3 £ A; 3 . In order to linearize our notation, we write 
x = [a, (3] when the value of a is clear from a, j3, or when it is not important; and 
x = [a, 0\ a otherwise. 

Similarly, every element x G M* (2) of order 3 is of the form 

fa a \ 
\I3 1 + a J ' 

To save space, we write x = {a, (5} a . 

We will sometimes leave out commas and parentheses. Thus, both 110 and (110) 
stand for (1, 1,0). The commutator of x and y will be denoted by [x, y\. 



Proposition 6.1 Let x = [a, (3} a , y = [7, 5]f, be two involutions of M*(2), x^y. 
Then: 

(i) [x, y] = e if and only if \xy\ = 2 if and only if (x, y) = V4 if and only if 
a ■ 8 = j3 ■ 7. 

(ii) [x, y] ^ e if and only if \xy\ = 3 if and only if (x, y) = S3 if and only if 
a ■ 6 7^ /3 ■ 7. 

(hi) x is contained in a subgroup isomorphic to S3, 

(iv) every subgroup o/M*(2) isomorphic to S3 contains an involution of the form 
[ , ]o- 

Proof The involution x commutes with y if and only if \xy\ = 2. Since 

ab + a ■ 5 



xy 



ab + (3 -7 



parts (i) and (ii) follow. 

Given x = [a, /3] a , pick 5 € cr 1 , 7 P ± , and choose b € {0, 1} so that y 
[7, 5} b G M*(2). Then (x, y) = S3, and (hi) is proved. 

Let G < M*(2), G ^ S3. Let x = [a, 0\ x , y = [7, <5]i £G,x^y. Then 

1 + a ■ S a + 7 + /3xi5 



' /; 5 + 5 + a x 7 1 + ft ■ 7 
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Since \xy\ = 3, we have a ■ 5 ^ (3 ■ 7. In other words, a ■ 6 + /3 ■ 7 = 1. Then the 
third involution xyx £ G equals 

l + a-5 + (a + -f)-P _ \ _ / a ■ (3 . 



But a ■ (3 = 0, as det x = 1. □ 

Lemma 6.2 Let x € G < M be an element of order 3, G = S3, and M a Moufang 
loop. Then T x £ Aut(M) permutes the involutions of G. 

Proof Let G = (x, y) = S3 with |y| = 2. The remaining two involutions of G are 
xy and yx. Then T x (y) = x~ l yx = xy, T x (xy) = yx, and T x (yx) = y. This can 
be seen from any presentation of G, or easily via the natural representation of S3 
with x = (1, 2, 3), y = (1, 2) G S3. □ 

We are going to show that Aut(M*(2)) acts transitively on the subgroups of 
M*(2) isomorphic to C 2 — the copies of C 2 in M*(2). Let 

so = [111, HI] 

be the canonical involution. For a vector a, let w(a) be the weight of a, i.e., the 
number of nonzero coordinates of a. 

Proposition 6.3 The group Aut(M*(2)) acts transitively on the copies of C 2 in 
M*(2). 

Proof Let x = [a, (3] a be an involution. We transform x into x$. By Proposition 
I6.1l fiii). x is contained in some G = S3. By Lemma 16.21 and Proposition 16 . 1 f iv) , we 
may assume that a = 0. 

Let r = w(a), s = w(/3). Using the automorphism d from Lemma 15.31 we can 
assume that r > s. We now transform x into x' so that x' = xq or x' = x\ or 
(x r , x ) S3 or (a/, xi) = S3, where xj = [100, 100]. 

If r s (mod 2), then (x, xo) = S3, by Proposition 16. If ii) . Suppose that r = s. 
Every permutation of coordinates can be made into an automorphism of M*(2), by 
Lemma [5.2i The involution xo is invariant under all permutations. Since a = 0, we 
must have s > 0, and thus (r, s) = (2, 2), (1, 1), (3, 1) or (3, 3). If (r, s) = (2, 2), 
transform x into x' = [110, 011], and note that (x', xi) = S3. If (r, s) = (1, 1), 
transform x into x' = xi- If (r, s) = (3, 1), transform x into x' = [111, 001]. Once 
again, (x', xi) = S3. Finally, if (r, s) = (3, 3), we have x = x' = xo- 

Now, when (x', Xj) = S3 for some i E {0, 1}, we can permute the involutions of 
(x', Xi) so that x' is mapped onto Xj, by Lemma RT21 

It remains to show how to transform x\ into xo- For that matter, consider the 
element y = {001, 101}i, and check that xo = T y (x\). □ 

Let us now continue by showing that there are at most two orbits of transitivity 
for copies of V4. (In fact, there are exactly two orbits but we will not need this 
fact.) 

Put 

u = [000, 110], «i = [001, 001], u 2 = [100, 010]. 
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Lemma 6.4 Let V 4 ^ (u, v) < M*(2). There is / £ Aut(M*(2)) such that /(it) = 
xo and f(v) is one of the two elements u\, u 2 . 

Proof By Proposition ^. 31 we may assume that u = xq. Write v = [a, /3], r = w(q), 
s = w(/3). We have r = s, else {u, v) = S3. Thanks to the automorphism <9, we may 
assume that r < s. If (r, s) = (0, 2), transform v into uq; if (r, s) = (1, 1), into u\ 
or u 2 ; if (r, s) = (1, 3), into u 3 = [001, 111]; if (r, s) = (2, 2), into u 4 = [110, 110] 
or u 5 = [011, 101]. 

Let Vl = {010, 110} , v 2 = {001, 101} , and define h = T v -ioT Vl , f 2 = T v -ioT V2 
(compose mappings from the right to the left). Then f\, f 2 are automorphisms of 
M*(2), and one can check directly that fi(xo) = f 2 (xo) = xq. Moreover, /i(t*4) = 
ui, fiius) = u 2 , fi(u^) = 113, and f 2 (u^) = d(uo). Thus U4 can be transformed 
into ui, and each of no, U3, into u 2 . □ 

7 Main Result 

We are now ready to demonstrate that the map h : 0(2) — ► 0(2) constructed in 
section U] is an extension of g. 

Proposition 7.1 Let C be a composition algebra, and let M C C be the set of 

all elements of norm 1. Assume that x, y £ M are such that x + y £ M. Then 
g (x + y) = g(x) + g(y) for every g £ Aut(M). 

Proof If x = y, we have 1 = N(x + y) = N{2x) = 4N(x) = 4. Therefore the 
characteristic is 3, and g(x) + g(x) = —g{x) = g(—x) = g(x + x). 

Assume that x 7^ y. By Lemma 12. 'i\ \xy^\ = 3, and so \g(x)g(y)" 1 \ = 
\g(xy~ 1 )\ = 3 as well. Then N(g(x) + g{y)) = 1, again by Lemma [2.31 Con- 
sequently, we use Lemma 12.41 twice to obtain g(x) + g(y) = —g(x)g{y)~' l g(x) = 
g(-xy~ 1 x)=g(x + y). □ 

We proceed to prove by induction on the number of summands that 

n n 
8=1 i=l 

for every g £ Aut(M*(2)) and x u . . ., x n £ M*(2) such that x\ H hx n £ M*(2). 

Lemma 7.2 Suppose that x, y £ M*(2), x ^ y, are such that none of x + e, y + e, 
x + y belongs to M*(2). Then (x, y) = V^, and there are a, b £ M*(2) suc/i i/iat 
a + 6 = e, and x + a, y + 6 £ M*(2). 

Proof We have A^x + e) = 0, i.e., N(x, e) = 0-1-1 = 0. Then, by Lemma [241 
x 2 = (xe" 1 ) 2 = — e = e. Similarly, y 2 = (xy -1 ) 2 = e. 

Since (x, y) = V4, we may assume that (x, y) = (xo, ifi) or (x, y) = (xo, u 2 ), 
where xo, u\, u 2 are as in Lemma l64l When (x, y) = (xq, u%), let a = {011, 010}i, 
else put a = {110, 100}i. In both cases, let b = e — a, and verify that x + a, 
y + &£M*(2). □ 
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Proposition 7.3 Let x\, x n G M*(2) be such that x = Ya=1 x * belongs to 
M*(2). Then ~* 

n n 

i=i i=i 

Proof The case n = 1 is trivial, and n = 2 is just Proposition 17.11 Assume that 
n > 3 and that the Proposition holds for all m < n. We can assume that at least 
two summands Xj are different, say x n _2 7^ ^n-l- Since (/(xx" 1 ) = g(x)g(x n )^ 1 , 
we can furthermore assume that x n = e. When at least one of x n _2 + e, x n _i + e, 
x ra _2+x n _i belongs to M*(2), we are done by the induction hypothesis. Otherwise, 
Lemma [7T2l applies. and there are a, b £ M*(2) such that a+x n _2, b+x n _i G M*(2), 
and a + 6 = e. Therefore, 

= ^(xi H h x n _ 3 + (s„_ 2 + a) + (x„_i + 6)) 

= fli(xi) H h 5(a?n-3) + ff(^n-2 + a) + g(x n -l + &) 

= 3(^1) H \-g(x n -i) +g(a) +g{b) 

= g{%i)^ ^ g{x n -\) + g{a + b), 

and we are through. □ 

Theorem 7.4 Every automorphism of M*(2) can be uniquely extended into an 
automorphism o/0(2). In particular, Aut(M*(2)) is isomorphic to C?2(2). 

Proof Pick g £ Aut(M*(2)). Using the basic triple for 0(2) from Lemma O 
construct an automorphism /i = Vo(2) of 0(2), as in Proposition I3.2L Then g, h 
coincide on a basis induced by the doubling triple. Every element of M*(2) is a 
sum of some of the basis elements. Hence, by Proposition 17.31 5 an d h coincide on 
M*(2). 

This extension is unique. Thus Aut(M*(2)) = Aut(0(2)), and Aut(0(2)) is 
isomorphic to ^2(2) by a theorem of Springer and Veldkamp. □ 
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